US12117954B2 - Method of dialogue with a computer on an on-board bus of a vehicle - Google Patents
Method of dialogue with a computer on an on-board bus of a vehicle Download PDFInfo
- Publication number
- US12117954B2 US12117954B2 US17/620,470 US202017620470A US12117954B2 US 12117954 B2 US12117954 B2 US 12117954B2 US 202017620470 A US202017620470 A US 202017620470A US 12117954 B2 US12117954 B2 US 12117954B2
- Authority
- US
- United States
- Prior art keywords
- computer
- command
- vehicle
- response
- board bus
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F13/00—Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units
- G06F13/38—Information transfer, e.g. on bus
- G06F13/40—Bus structure
- G06F13/4063—Device-to-bus coupling
- G06F13/4068—Electrical coupling
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F13/00—Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units
- G06F13/14—Handling requests for interconnection or transfer
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F13/00—Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units
- G06F13/38—Information transfer, e.g. on bus
- G06F13/40—Bus structure
- G06F13/4004—Coupling between buses
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/30—Arrangements for executing machine instructions, e.g. instruction decode
- G06F9/38—Concurrent instruction execution, e.g. pipeline or look ahead
- G06F9/3885—Concurrent instruction execution, e.g. pipeline or look ahead using a plurality of independent parallel functional units
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/52—Program synchronisation; Mutual exclusion, e.g. by means of semaphores
Definitions
- the invention relates to a method for dialoguing with a computer on an on-board bus of a vehicle.
- the invention particularly relates to a method for dialoguing from a first on-board bus in a vehicle, with a first computer connected to a second on-board bus of the vehicle.
- the method according to the invention is particularly useful for updating on-board computers, whilst at the same time allowing real-time programs to be executed for operating the vehicle.
- Updating on-board computers and executing real-time programs generally requires commands to be transmitted over one or more on-board buses.
- Timers are generally implemented to control the duration that separates the transmission of a command from the reception of a response to this command, having the disadvantage of increasing the duration when the amount of commands increases.
- document EP 1434129 A2 discloses a device for controlling rewriting for an on-board program, in which a switching command is based on a signal originating from a timer.
- the disclosed device controls two operational modes, a normal mode, which could correspond to a diagnostic mode, and a rewrite mode for rewriting the on-board program, which can be used for a computer update.
- the disclosed device switches from the normal mode to the rewrite mode when it receives a program rewrite command originating from a server, and switches from the rewrite mode to the normal mode when it receives a command to switch to the normal mode during the rewrite mode.
- Each switching operation has the disadvantage of exiting the ongoing mode.
- the aim of the invention is a method for dialoguing from a first on-board bus in a vehicle, with a first computer connected to a second on-board bus of the vehicle, the first bus being connected to the second bus by a second computer, wherein a third computer connected to the first on-board bus processes a main command intended for the first computer, comprising steps in which:
- a signal in two states, ready, not ready, is periodically transmitted by the second computer, for which the method comprises steps in which the second computer sets the signal:
- the method comprises a step, in which the third computer goes into standby for the signal set to the ready state after having received said signal set to the occupied state.
- said write command comprises a first frame, which comprises a first identifier field for a command, a first identifier field for the first dedicated zone, and at least one description field for the main command.
- the description of the main command comprises a standard field for the main command, an identification field for the second computer, and a useful data identification field for the second computer for establishing the transmitted response.
- the method comprises a step, in which the second computer transmits an acknowledgement intended for the first computer upon receipt of said write command.
- the acknowledgement comprises a second frame, which comprises an acknowledgement identifier field and a second identifier field for the first dedicated zone.
- said read command transmitted by the third computer comprises a third frame, which comprises a second command identification field and a first identifier field for the second dedicated zone.
- said response to the read command comprises a fourth frame, which comprises a fourth identifier field for the response to the command, a second identifier field for the second dedicated zone, at least one description note field for the main command, and a content field for the response transmitted by the first computer.
- said main command is a command for reading resident data in the first computer, for which the auxiliary command comprises a fifth frame, which comprises an identification field for a read command and an identification field for said resident data, so that the response transmitted by the first computer comprises a sixth frame, which comprises an identification field for a response to the read command, an identification field for said resident data, and a field containing the value for said resident data.
- the read commands and the write commands are commands in accordance with the UDS (Unified Diagnostic Services) protocol.
- UDS Unified Diagnostic Services
- the method can also comprise steps in which:
- FIG. 1 schematically shows a system on board a vehicle, on which the invention is implemented
- FIG. 2 schematically shows frames of commands, with which the invention is implemented
- FIG. 3 shows steps of a method according to the invention for processing a main read command
- FIG. 4 shows steps of a first method according to the invention for processing a main installation command
- FIG. 5 shows steps of a second part of a method according to the invention for processing a main installation command
- FIG. 6 shows steps of a third and final part of a method according to the invention for processing a main installation command.
- FIG. 1 shows two computers 9 , 10 connected to an on-board bus 1 in a vehicle, and three computers 12 , 13 , 14 connected to an on-board bus 2 in the vehicle.
- the computer 9 is, for example, an on-board computer dedicated to telecommunications of the IVC (In Vehicle Communication) type.
- the computer 10 is, for example, an on-board computer of the IVI (In Vehicle Infotainment) type, the computer processing capabilities of which are comparable to those of a microcomputer.
- Other on-board computers, not shown, can be connected to the on-board bus 1 .
- the computers 12 , 13 , 14 connected to the on-board bus 2 are preferably on-board computers for controlling-commanding components of the vehicle of the ECU (Electronic Control Unit) type.
- a computer 11 connected to the on-board bus 1 and to the on-board bus 2 performs gateway functions between the two on-board buses.
- FIG. 3 shows steps of a dialogue method, in which the computer 10 processes a main command, which is a command for reading resident data in one of the computers 12 , 13 , 14 , for example, in the computer 12 .
- a main command which is a command for reading resident data in one of the computers 12 , 13 , 14 , for example, in the computer 12 .
- This type of command is useful, for example, for reading a digital component reference, or a version number of the digital component in the computer 12 , with a view to deciding, for example, whether or not the digital component needs to be updated.
- the digital component equally can relate to an executable program, a database or any other digital structure such as, for example, a source program or a table of parameters.
- the computer 10 transitions to a step 102 when a read request submitted by a higher order method, for example, a method for updating the computer 12 , confirms a transition 101 .
- the read request can contain an identifier for identifying a computer from among the computers 12 , 13 , 14 connected to the on-board bus 2 , in this case the identifier of the computer 12 .
- the computer identifier can be made up of a computer address in accordance with the communication protocol of the bus 2 , of the CAN (Controller Area Network), Flex Ray or TTP type, also known in aeronautic, automotive Ethernet or other fields.
- the computer identifier also can be made up of a string of ASCII characters that name the computer in its functional universe, for example, “BCM” (Body Control Module), “HEVC” (Hybrid Electric Vehicle Controller), “VDC” (Vehicle Dynamic Control) or other.
- BCM Body Control Module
- HEVC Hybrid Electric Vehicle Controller
- VDC Vehicle Dynamic Control
- the advantage of a string of ASCII characters involves being able to designate a computer independently of an on-board system architecture.
- a further advantage of a string of ASCII characters involves forming a mnemotechnic means that is easier for a human being to understand.
- the read request can contain a data identifier 63 in the identified computer.
- step 102 the computer 10 builds a description of the main command on the basis of the request that confirmed the transition 101 , then generates a write command for the description of the main command in a first dedicated data zone 61 , resident in the memory of the computer 11 .
- FIG. 2 shows an example of a write command that comprises a frame 21 .
- the frame 21 comprises an identifier field 31 identifying the generated command as a write command, an identifier field 32 identifying the first dedicated zone 61 , and at least one field 33 , 34 , 35 for containing the description 27 of the main command.
- the field 33 that makes up the description 27 provides a type of main command. Solely by way of a non-limiting illustration, the type of main command is identified, for example, by two letters in ASCII code. The first letter identifies a class of main command, “E” for “Execute”, “R” for “Read” or “W” for “Write”.
- the second letter identifies an action within the main command class, “EA” for “Execute an Activation”, “ED” for “Execute a Download”, “EI” for “Execute an Installation”, “EC” for “Execute a Deletion”, “ER” for “Execute a Reinitialization”, “RD” for “Read Data”, “RX” for “Read Extended data”, “WD” for “Write Data”.
- the field 34 that makes up the description 27 provides an on-board computer identifier, in particular as it is indicated in the request.
- the field 35 that makes up the description 27 contains parameters that are useful for executing the command.
- the parameters are identifiers of digital components to be installed, respectively to be activated.
- the description 27 of the main command comprises a field 33 providing the “RD” type of main command, an identification field 34 for the computer connected to the bus 2 , for example, the functional name of the computer 12 , and a parameters field 35 , containing an identifier of data to be read as a parameter that is useful for the computer 11 for assisting with the processing of the main command.
- the use of a write command in accordance with the UDS (Unified Diagnostic Services) protocol has the advantage of benefiting from the mechanism that is generally preinstalled in most on-board computers in the motor vehicle field, in particular for performing the diagnostic functions, without having to modify the low-level communication layers for implementing the dialogue method according to the invention.
- the field 31 then contains the SID (Service Identifier) $2E, which is the known hexadecimal code for data written by a DID identifier.
- a transition 103 for transitioning from step 102 to a step 104 is confirmed when the computer 11 is detected as ready to respond to the write command supported by the frame 21 .
- the computer 11 performs a gateway function for another instance of the dialogue method according to the invention, or a gateway function for a command generated by another method such as, for example, a diagnostic method
- the computer remains on standby in step 102 .
- the computer 10 does not unnecessarily congest the bus 1 with attempts to transmit commands that would remain ineffective due to the computer 11 being occupied by other functions.
- momentarily placing the dialogue method on standby in step 102 allows the diagnostic command to be executed without having to interrupt the diagnostic method.
- the computer 11 is the computer 11 itself that declares whether or not it is ready to process the commands transmitted within the scope of the dialogue method according to the invention.
- the computer 11 periodically transmits a signal over the bus 1 comprising two states, ready, occupied or not ready.
- the computer 11 sets the signal to the ready state by default. As soon as the computer 11 receives a command, whether from the dialogue method according to the invention or from any other method such as, for example, the diagnostic method, the computer 11 sets the signal to the occupied state until the processing of the ongoing command has finished.
- step 104 with the computer 11 having been detected as ready to respond to the write command, the computer 10 transmits the write command to the computer 11 .
- the computer 10 can encapsulate the frame 21 in a CAN frame on the bus 1 , or in another manner, for example, can encapsulate the frame 21 in an IP frame if the vehicle Ethernet protocol is used on the bus 1 .
- the reception of the write command in the computer 11 confirms a transition 111 that is required in order to transition the computer 11 from the initial step 110 to a step 114 , in which the computer 11 transmits an auxiliary command to the computer of the computers 12 , 13 , 14 identified in the field 34 , for example, the computer 12 , to respond to the main command, on the basis of the description 27 of the main command written in the dedicated data zone 61 of the computer 11 .
- FIG. 2 provides an example of an auxiliary command that comprises a frame 25 comprising an identification field 48 for a read command and an identification field 49 for the resident data in the computer 12 .
- the field 48 then contains the SID $22, which is the known hexadecimal code for data read by a DID identifier.
- the field 49 contains the DID identifier of the data zone 63 of the computer 12 that was indicated in the field 35 of the frame 21 .
- the transition 111 can directly transition the method from the initial step 110 to the step 114 .
- the transition 111 transitions the method from the initial step 110 to an intermediate step 112 .
- step 112 the computer 11 checks whether or not the main command description 27 is complete, with respect to predetermined security rules that are not part of the subject matter of the present invention. In the event that step 112 is implemented, a transition 113 is confirmed if the main command description 27 is verified as being complete, or a transition 117 is confirmed if the main command description 27 is verified as being incomplete. Step 114 is then activated following the confirmation of the transition 113 .
- step 114 the computer 11 places the periodic signal in the occupied state, in other words following confirmation of the transition 111 by receiving the write command originating from the computer 10 .
- the computer 11 responds to the write command by transmitting an acknowledgement of receipt or acknowledgement.
- the computer 11 transmits a frame 22 , a first field 37 of which contains the SID code of value $6E, and a second field 38 of which contains the value of the field 32 of the frame 21 to allow the computer 10 to recognize the transmitted write command to which the received acknowledgement of receipt corresponds.
- the field 38 forms an identifier field for the first dedicated zone 61 .
- step 106 The reception by the computer 10 of the periodic signal set to the occupied state, or of the frame 22 , confirms a transition 105 that transitions the method from step 104 to a step 106 in the computer 10 .
- step 106 the computer 10 is placed on standby for the signal set to the ready state.
- the computer 12 initially in a standby step 120 of the dialogue method according to the invention, confirms a transition 121 when it receives the auxiliary command represented by the frame 25 transmitted by the computer over the on-board bus 2 .
- a confirmation of the transition 121 activates a step 122 , in which the computer 12 transmits a response to the received auxiliary command.
- the response transmitted to the computer 11 comprises a frame 26 , which comprises a response identification field 50 , in this case a response to the read command, an identification field 51 for said resident data, and a field 52 containing a value of the resident data 63 identified by the field 51 , as shown in FIG. 2 .
- the field 50 then contains the SID $62, which is the known hexadecimal code of a response to data read by a DID identifier.
- the field 51 contains the DID identifier of the data zone 63 of the computer 12 that was indicated in the field 49 of the frame 25 .
- the computer 12 then returns to the standby step 120 .
- the reception of the response by the computer 11 confirms a transition 115 that transitions the dialogue method from step 114 to a step 116 , in which the computer 11 generates a description 28 of the response to the main command, which in this case is a command to read the resident data 63 in the computer 12 .
- the response description 28 comprises fields 43 , 44 , 45 , which each respectively contain the values of the fields 33 , 34 , 35 of the command description 27 for identifying that the response description is indeed the one which corresponds to the main command description.
- the response description 28 also comprises a field 47 , which contains the value contained in the field 52 of the frame 26 .
- the computer 11 stores the response description 28 in a second dedicated data zone 62 , resident in the memory of the computer 11 .
- step 116 the computer 11 then sets the periodic signal to the ready state.
- a transition 107 is confirmed when the computer 10 detects that the computer 11 is ready to respond. In the case of a preferred embodiment of the invention, the transition 107 is confirmed through the reception of the periodic signal in the ready state.
- step 108 The confirmation of the transition 107 activates a step 108 in the computer 10 .
- step 108 with the computer 11 having been detected as ready to respond to a read command, the computer 10 transmits a read command from the second dedicated zone 62 intended for the computer 11 .
- the read command is represented, for example, by a frame 23 , as shown in FIG. 2 .
- the frame 23 comprises an identification field 39 for identifying a command as a read command, and an identifier field 40 for the second dedicated data zone 62 .
- the field 39 contains the value $22 that identifies a read command
- the field 40 contains a DID value that is the address of the dedicated data zone 62 in the memory of the computer 11 .
- a transition 119 is confirmed when the computer 11 receives the read command represented by the frame 23 .
- the confirmation of the transition 119 activates a step 124 , in which the computer 11 transmits a response to the computer 10 .
- the response to the received read command comprises a frame 24 , which comprises an identifier field 41 for identifying a response to a read command, and an identifier field 42 for identifying the second dedicated zone 62 , so as to be able to check that the frame 24 forms the response to the read command represented by the frame 23 .
- the frame subsequently contains the description 28 , which comprises the fields 43 , 44 , 45 , each containing a value respectively equal to that contained in each of the fields 33 , 34 , 35 by way of a note of the description of the main command.
- the description 28 also comprises the field 47 , which contains the response to the main command.
- the computer 11 then returns to the initial standby step 110 with respect to the dialogue method according to the invention.
- a transition 109 is confirmed when the computer 10 receives the response to the read command, represented by the frame 24 .
- the confirmation of the transition 109 activates a step 126 , in which the computer 10 responds to the main command on the basis of the content of the field 47 extracted from the response to the read command of the second dedicated zone of the computer 11 , in which the response transmitted by the computer 12 is stored.
- the computer 10 subsequently returns to the initial standby step 100 with respect to the dialogue method according to the invention.
- the use of the UDS protocol for the commands of the dialogue methods according to the invention allows a main command to be processed, which forms a computer updating method, without having to switch from a diagnostic mode to an update mode.
- the commands remain diagnostic commands in the dialogue between computers.
- Processing of the updating function is performed by processing a main command in the computer 10 on an upper layer, in a manner comparable to the processing of a diagnostic function.
- the computer 11 can process frames associated with diagnostic functions by directly transferring them from the bus 1 to the bus 2 , and vice versa, as a gateway.
- the computer 11 can process frames connected to diagnostic functions by processing them by diagnostic functions resident in the computer 11 .
- the computer 11 can process frames connected to updating functions by updating functions resident in the computer 11 , as it would for diagnostic functions resident in the computer 11 .
- a single protocol stack is sufficient, namely the UDS protocol stack, for processing as many purely diagnostic commands as updating commands.
- the computer 11 sets the periodic signal to the occupied state, simply placing a command on standby that is connected to the update that would occur when processing the purely diagnostic command.
- the computer 11 sets the periodic signal to the occupied state, simply ignoring the purely diagnostic command that would occur when processing the command connected to the update of the digital component, leaving the diagnostic method free to retransmit the purely diagnostic command when the computer 11 returns the periodic signal to the ready state.
- the transmission of the read and write commands connected to the processing of the main command from the computer 10 connected to the on-board bus 1 does not require a command received from a remote server in order to relaunch an updating process as soon as the periodic signal is set to the ready state.
- the updating process can occur without requiring remote connection of the vehicle, as long as the updating data has been previously downloaded into the computer 10 .
- the main command of the dialogue method when it is for reading data in one of the computers 12 , 13 , 14 connected to the bus 2 , more simply could be implemented by a single command to read data intended directly for the computer of the computers 12 , 13 , 14 that hosts the data, for example, the computer 12 .
- Replacing the single read command with a write command in the first dedicated data zone of the computer 11 , followed by a read command in the second dedicated data zone of the computer 11 allows the problem of excessive duration raised in the previous paragraph to be overcome.
- a first duration that separates the write command of the invention and the response to the write command is reduced to the sum of the durations required to transmit the write command from the computer 10 to the computer 11 , then to transmit the response, generally a simple acknowledgement, from the computer 11 to the computer 10 .
- a second duration that separates the read command of the invention and the response to the read command is reduced to the sum of the durations required to transmit the read command from the computer 10 to the computer 11 , then to transmit the response from the computer 11 to the computer 10 .
- a third duration that separates the end of the first duration and the start of the second duration does not matter, since in the waiting step 106 of the method the state of the periodic signal simply needs to be continuously read until it is detected as ready.
- the method is reliable with respect to an interruption that would occur during said third duration, for example, in the event of the electrical disconnection of the vehicle.
- the method according to the invention can resume in the step in which it was stopped before the interruption.
- step 112 in which the computer 11 checks whether or not the description 27 of the main command is complete, a transition 117 is confirmed when the description 27 of the main command is verified as being incomplete.
- a confirmation of the transition 117 activates a step 118 , in which the computer 11 stores a warning in the second dedicated zone 62 , then sets the periodic signal to the ready state.
- the dialogue method according to the invention is applicable to main commands other than the main command for reading data in a first computer connected to the on-board bus 2 , during the processing of which the computer 11 transmits a single auxiliary command to the first computer that is formed by a command to read the data, so as to respond to the main command.
- FIG. 4 shows steps of the dialogue method, in which the computer 10 processes a main command, which is a command for installing a digital component, for example, in the computer 12 .
- a main command which is a command for installing a digital component, for example, in the computer 12 .
- This type of command is useful, for example, for installing one or more digital components.
- the digital component equally can relate to an executable program, a database or any other digital structure such as, for example, a source program or a table of configuration parameters.
- the computer 10 transitions to a step 202 when an installation request submitted by a higher order method, for example, a method for updating the computer 12 , confirms a transition 201 .
- the installation request can contain an identifier for identifying a computer from among the computers 12 , 13 , 14 connected to the on-board bus 2 , in this case the identifier of the computer 12 .
- the installation request can contain a file, for example, in HTML format with tags identifying blocks of physical memory of the computer 12 , in each of which content of the HTML file is written ranging between two tags identifying the same physical memory block 64 .
- the physical memory blocks are of the permanent rewritable memory type, for example, of the EEPROM type.
- step 202 the computer 10 builds a description of the main command from the request that confirmed the transition 201 , then generates a write command for the description of the main command in the first dedicated data zone 61 , resident in the memory of the computer 11 .
- FIG. 2 shows an example of a write command, for which the field 31 of the frame 21 continuously identifies the generated command as a write command, the field 32 continuously identifies the first dedicated zone 61 .
- the field 33 comprises, for example, two letters “EI” that indicate a main command of the “Execute Installation” type.
- the field 34 in particular specifically identifies the target computer connected to the bus 2 to which the main command is applied, for example, the computer 1 .
- the field 35 contains a parameter, the value of which identifies a packet containing at least one digital component to be installed in the target computer.
- the field 31 then contains the SID $2E, which is the known hexadecimal code of data written by a DID identifier, in this case corresponding to the dedicated zone 61 .
- a transition 203 for transitioning from step 202 to a step 204 is confirmed when the computer 11 is detected as ready to respond to the write command supported by the frame 21 .
- the computer 11 performs a gateway function for another instance of the dialogue method according to the invention, or a gateway function for a command generated by another method such as, for example, a diagnostic method
- the computer remains on standby in step 202 .
- the computer 10 does not unnecessarily congest the bus 1 with attempts to transmit commands that would remain ineffective due to the computer 11 being occupied by other functions.
- momentarily placing the dialogue method on standby in step 202 allows the diagnostic command to be executed without having to interrupt the diagnostic method.
- the computer 11 sets the signal to the ready state by default. As soon as the computer 11 receives a command, whether this is the dialogue method according to the invention or any other method such as, for example, the diagnostic method, the computer 11 sets the signal to the occupied state until the processing of the ongoing command is complete.
- the computer 10 transmits the write command to the computer 11 .
- the computer 10 can encapsulate the frame 21 in a CAN frame on the bus 1 , or in another manner, for example, can encapsulate the frame 21 in a frame on an IP if the vehicle Ethernet protocol is used on the bus 1 .
- the reception of the write command in the computer 11 confirms a transition 211 , which transitions the computer 11 from the initial step 110 to a step 212 , in which the computer 11 writes the description 27 in the first dedicated zone 61 , then immediately transmits an acknowledgement of the proper execution of the write command to the computer 10 .
- the acknowledgement of proper execution of the write command is represented by the frame 22 , in which the field 37 contains the value $6E and the field 38 contains the DID of the zone 61 .
- the reception of the frame 22 in the computer 10 confirms a transition 205 that transitions the computer 10 from step 204 to a step 206 , in which the computer reads the state of the signal periodically transmitted by the computer 11 , while waiting to read the ready state.
- the periodic signal also comprises an indication of the state of progress of the execution of the steps in the computer 11 .
- the computer 11 sets the periodic signal to the occupied state, then transmits a series of one or more first auxiliary commands to the computer of the computers 12 , 13 , 14 identified in the field 34 , for example, the computer 12 , in order to respond to the main command, on the basis of the description 27 of the main command, written in the dedicated data zone 61 of the computer 11 .
- the periodic signal also comprises an indication of the state of progress
- the computer 11 indicates the state of progress corresponding to step 212 .
- each first auxiliary command involves reading an attribute of the computer 12 , the knowledge of which is useful for correctly installing the one or more digital components.
- the example provided in FIG. 2 can be used by way of a first auxiliary command, which command comprises the frame 25 comprising the identification field 48 for a read command and the identification field 49 for the resident data in the computer 12 , corresponding to the read attribute.
- the reception of the series of first auxiliary commands in the computer 12 confirms a transition 221 that activates a step 222 , in which the computer 12 transmits a response to each first received auxiliary command.
- the field 48 contains the SID $22.
- Each response to a first auxiliary command on the model of the frame 26 in FIG. 2 contains the SID $62 in the field 50 , the identification of the attribute in the field 51 and the read value of the attribute in the field 52 .
- the reception in the computer 11 of the last response to the series of first auxiliary commands confirms a transition 213 that transitions the computer 11 from the step 212 to a step 214 , in which the computer 11 transmits a series of one or more second auxiliary commands to the computer 12 for checking that the computer 12 is not troubled by a fault likely to hinder the installation of the digital component.
- FIG. 2 provides an example of an auxiliary command that comprises a frame 29 comprising an auxiliary command designation field 53 , an identification field 54 for identifying a target in the computer 12 , which the auxiliary command relates to, and which incidentally may or may not comprise a command extension field 55 .
- the target is a fault code in particular.
- the reception of the series of second auxiliary commands in the computer 12 confirms a transition 223 that activates a step 224 , in which the computer 12 transmits a response to each second received auxiliary command.
- the field 53 contains the SID $29 that denotes the reading of DTC (“Diagnostic Trouble Codes”) information.
- the field 54 contains a fault identification code generally based on five alphanumeric characters. Solely by way of a non-limiting example, the first character is the letter P for denoting a powertrain of the vehicle (for example, comprising an engine and a gearbox), the letter C for denoting a vehicle chassis, the letter B for denoting a vehicle body, the letter U for denoting a user network. Also, solely by way of a non-limiting example, the second character is the number 0 for denoting a generic fault, the number 1 for denoting a manufacturing fault.
- Each response to a second auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $59 in a field 56 , a note of the fault code in a field 57 and the read value of a state of the fault code in a field 59 , for example, fault or non-fault.
- the computer 11 When the periodic signal also comprises an indication of the state of progress, the computer 11 indicates the state of progress corresponding to the fault or non-fault state contained in the field 59 .
- the reception in the computer 11 of a last response to the series of second auxiliary commands confirms a transition 215 that transitions the computer 11 from step 214 to a step 216 , in which the computer 11 transmits a third auxiliary command to the computer 12 for starting an update session.
- the frame 29 shown in FIG. 2 can be used to represent the third auxiliary command.
- the target particularly involves closing the operation performed in the computer 12 .
- the reception of the third auxiliary command in the computer 12 confirms a transition 225 that activates a step 226 , in which the computer 12 transmits a response to the third received auxiliary command.
- the field 53 contains the SID $10 that denotes the control of a diagnostic session.
- the availability of various services depends on the diagnostic session that is active.
- the session called “Extended Diagnostic Session” is used to release additional diagnostic functions such as, for example, the adjustment of sensors.
- the session called “Safety system Diagnostic Session” is used to test all the diagnostic functions that are critical for security such as, for example, testing the airbags.
- a “Default Session” is generally active, in particular in step 120 , and is maintained until the transition 225 is confirmed.
- the field 54 contains a session identification code, which in this case is specifically dedicated to the installation of one or more digital components in the computer 12 called “FOTA”, for example.
- the response to the third auxiliary command, shown on the model of the frame 30 in FIG. 2 contains the SID $50 in the field 56 , and a note of the session identification code in the field 57 .
- the periodic signal also comprises a state of progress indication
- the computer 11 indicates the state of progress corresponding to the opening of the update session.
- the reception in the computer 11 of a response to the third auxiliary command confirms a transition 217 that transitions the computer 11 from step 216 to a step 218 , in which the computer 11 transmits a fourth auxiliary command to the computer 12 for checking for the absence of faults in the memory blocks of the computer 12 , with a view to using them to write updates of digital components therein.
- the frame 29 shown in FIG. 2 can be used to represent the fourth auxiliary command.
- the target is a memory fault code in particular.
- the reception of the fourth auxiliary command in the computer 12 confirms a transition 227 that activates a step 228 , in which the computer 12 transmits a response to the fourth received auxiliary command.
- the field 53 contains the SID $19 that denotes diagnosed fault reading.
- the response to the fourth auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $59 in the field 56 , and a note of the fault code in the field 57 .
- the field 59 contains a value that indicates whether the fault identified by the code contained in the field 57 is present or absent.
- the periodic signal also comprises a state of progress indication
- the computer 11 indicates the state of progress corresponding to the state relating to the presence or the absence of the fault contained in the field 59 .
- the reception in the computer 11 of a response to the last fourth auxiliary command confirms a transition 219 that transitions the computer 11 from step 218 to a step 220 , in which the computer 11 transmits a series of fifth auxiliary commands to the computer 12 for checking for the absence of faults in the memory block counters of the computer 12 , with a view to using them to write the updates of digital components in the memory blocks.
- the frame 29 shown in FIG. 2 can be used to represent each fifth auxiliary command.
- the target is a memory counter fault code in particular.
- the reception of the series of fifth auxiliary commands in the computer 12 confirms a transition 229 that activates a step 230 , in which the computer 12 transmits a response to each fifth received auxiliary command.
- the field 53 contains the SID $19 that denotes diagnosed fault reading.
- the response to each fifth auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $59 in the field 56 , and a note of the fault code in the field 57 .
- the field 59 contains a value that indicates whether the fault identified by the code contained in the field 57 is present or absent.
- the periodic signal also comprises a state of progress indication
- the computer 11 indicates the state of progress corresponding to the state relating to the presence or the absence of the fault contained in the field 59 .
- FIG. 5 shows the steps following those of FIG. 4 .
- the reception in the computer 11 of a response to the last fifth auxiliary command confirms a transition 251 that transitions the computer 11 from step 220 to a step 252 of a first loop, in which the computer 11 transmits a sixth auxiliary command to the computer 12 to read a start address of the first memory block in the memory of the computer 12 .
- the frame 29 shown in FIG. 2 can be used to represent each sixth auxiliary command.
- the target is particularly a DID data reference relating to a memory blocks addressing register in the computer 12 .
- the reception of the sixth auxiliary command in the computer 12 confirms a transition 261 that activates a step 262 , in which the computer 12 transmits a response to the sixth received auxiliary command.
- the field 53 contains the SID $22 that denotes reading of data identified by the DID reference of the field 54 .
- the response to the sixth auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $62 in the field 56 , and a note of the DID reference in the field 57 .
- the field 59 contains a value that indicates the start address of the first memory block provided to load the first digital component therein.
- the reception in the computer 11 of a response to the sixth auxiliary command confirms a transition 253 that transitions the computer 11 from step 252 to a step 254 of the first loop, in which the computer 11 transmits a seventh auxiliary command to the computer 12 for writing a reference for the first digital component in the header of the first memory block in the memory of the computer 12 .
- the frame 29 shown in FIG. 2 can be used to represent each seventh auxiliary command.
- the target is particularly a DID reference for data relating to a digital component naming register in the computer 12 .
- the reception of the seventh auxiliary command in the computer 12 confirms a transition 263 that activates a step 264 , in which the computer 12 transmits a response to the seventh received auxiliary command.
- the field 53 contains the SID $2E that denotes the writing of data identified by the DID reference of the field 54 .
- the response to the seventh auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $6E in the field 56 , and a note of the DID reference in the field 57 .
- the field 59 contains a value that indicates an acknowledgement of the write command.
- the reception in the computer 11 of a response to the seventh auxiliary command confirms a transition 255 that transitions the computer 11 from step 254 to a step 256 of the first loop, in which the computer 11 transmits an eighth auxiliary command to the computer 12 requesting that a digital component is loaded into a first memory block of the computer 12 .
- the frame 29 shown in FIG. 2 can be used to represent the eighth auxiliary command.
- the target is the address of the first memory block in particular.
- the reception of the eighth auxiliary command in the computer 12 confirms a transition 265 that activates a step 266 , in which the computer 12 deletes the content of the ongoing memory block, then transmits a response to the eighth received auxiliary command, which acknowledges the proper execution of the eighth command. It should be noted in this case that a physical memory block of the rewritable type needs to be deleted before rewriting.
- the field 53 contains the SID $34 that denotes a request to load from the computer 11 to the computer 12 .
- a field 55 contains a size of the digital component to be loaded.
- the response to the eighth auxiliary command, shown on the model of the frame 30 in FIG. 2 contains the SID $74 in the field 56 and a note of the address of the memory block in the field 57 .
- the field 58 notes the size of the digital component to be loaded.
- the field 59 contains a value that indicates a maximum acceptable loading size.
- the reception in the computer 11 of a response to the eighth auxiliary command confirms a transition 257 that transitions the computer 11 from the step 256 to a step 258 of the first loop, in which the computer 11 transmits a ninth auxiliary command to the computer 12 for transferring the content of the digital component to the first memory block of the computer 12 .
- the frame 29 shown in FIG. 2 can be used to represent the ninth auxiliary command.
- the target is the address of the first memory block in particular.
- the reception of the ninth auxiliary command in the computer 12 confirms a transition 267 that activates a step 268 , in which the computer 12 transmits a response to the ninth received auxiliary command.
- the field 53 contains the SID $36 that denotes a command to transfer content of the digital component to the current physical memory block.
- the transfer is performed by maximum sized packets. If the size of the content exceeds the maximum size of a packet the transfer is repeated until all the content is transmitted.
- the response to the ninth auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $76 in the field 56 , and a note of the address of the memory block in the field 57 .
- the frame 29 shown in FIG. 2 can be used to represent the tenth auxiliary command.
- the reception of the tenth auxiliary command in the computer 12 confirms a transition 269 that activates a step 270 , in which the computer 12 transmits a response to the tenth received auxiliary command.
- the field 53 contains the SID $37 that denotes a transfer mode exit command.
- the response to the ninth auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $77 in the field 56 , and a note of the address of the memory block in the field 57 .
- the reception in the computer 11 of a response to the tenth auxiliary command confirms a transition 291 that transitions the computer 11 from the step 260 to a step 292 of the first loop, in which the computer 11 checks whether a subsequent digital component exists that is to be loaded into a subsequent memory block.
- a subsequent digital component confirms a transition 293 that loops the method back to the re-execution of steps 252 to 292 , each adapted to the subsequent physical memory block in terms of identification, of size, and of memory block address.
- the frame 29 shown in FIG. 2 also can be used to represent the eleventh auxiliary command.
- the target is a memory fault code in particular.
- the reception of the eleventh auxiliary command in the computer 12 confirms a transition 271 that activates a step 272 , in which the computer 12 transmits a response to the eleventh received auxiliary command.
- the field 53 contains the SID $19 that denotes diagnosed fault reading.
- the response to the eleventh auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $59 in the field 56 , and a note of the fault code in the field 57 .
- the field 59 contains a value that indicates whether the fault identified by the code contained in the field 57 is present or absent.
- FIG. 6 shows the final steps of the method following those shown in FIG. 5 .
- the reception in the computer of a response to the eleventh auxiliary command confirms a transition 297 of the second loop that activates a step 298 , in which the computer 11 transmits a twelfth auxiliary command to the computer 12 for activating a first local program, in which the computer 12 checks that the first digital component has been correctly written in the first memory block in the memory of the computer 12 .
- the frame 29 shown in FIG. 2 can be used to represent each twelfth auxiliary command.
- the target registered in the field in particular is a condenser program reference stored in the memory in the computer 12 .
- the field 55 contains an address of the memory block to be checked.
- the reception of the twelfth auxiliary command in the computer 12 confirms a transition 273 that activates a step 274 , in which the computer 12 activates the condenser program, which particularly involves computing a condensation of the content written in the physical memory block.
- the computer 12 transmits a response to the twelfth received auxiliary command that contains the computed condensation.
- the response to the twelfth auxiliary command allows the computer 11 to compare the condensation computed by the computer 12 with a condensation held by the computer 11 before the content is loaded into the physical memory block. The computer 11 thus can check that the content of the physical memory block, following rewriting, is consistent with the content to be loaded into the physical memory block.
- the field 53 contains the SID $31 that denotes the activation of a program identified by the program reference of the field 54 .
- the response to the twelfth auxiliary command, shown on the model of the frame 30 in FIG. 2 contains the SID $62 in the field 56 , and a note of the DID reference in the field 57 .
- the field 59 contains a value that indicates the start address of the first memory block provided to load the first digital component therein.
- the reception in the computer 11 of a response to the sixth auxiliary command confirms a transition 299 that activates a step 300 , in which the computer 11 checks whether a next physical memory block exists for the subsequent loading of a digital component.
- next physical memory block confirms a transition 301 that loops back to the step 298 , in which the first block is replaced by the next block and so on until the last physical memory block.
- the absence of the next physical memory block confirms a transition 303 that activates a step 304 , in which the computer 11 transmits a thirteenth auxiliary command to the computer 12 for reading a memory of the computer 12 intended for storing detected faults.
- the reception of the thirteenth auxiliary command in the computer 12 confirms a transition 275 that activates a step 276 , in which the computer 12 transmits a response to the thirteenth received auxiliary command that contains the faults detected when executing the previous steps.
- the field 53 contains the SID $19 that denotes the reading of Diagnostic Trouble Code (DTC) information.
- DTC Diagnostic Trouble Code
- each DTC fault processed by the computer 12 is stored with its own code in the dedicated memory of the computer 12 , called error memory, that can be read at any time.
- error memory the dedicated memory of the computer 12
- additional information particularly associated with the context relating to the occurrence of the fault, is also stored and able to be read at any time.
- the response to the thirteenth auxiliary command shown on the model of the frame 30 in FIG. 2 , contains the SID $59 in the field 56 , and a note of the DID reference in the field 57 .
- the field 59 uses the content of the error memory.
- the reception in the computer 11 of a response to the thirteenth auxiliary command confirms a transition 305 that activates a step 306 , in which the computer 11 transmits a fourteenth auxiliary command to the computer 12 .
- the effect of the fourteenth auxiliary command is to cause the computer 12 to exit the open session in step 216 in order to return it to the default session.
- the computer 12 only takes into account, between steps 216 and 306 , the commands originating from the computer 11 , within the context of the dialogue method set forth above.
- the computer 12 can take into account as many commands originating from the computer 11 , within the context of the instance of the aforementioned dialogue method in the light of FIGS.
- the reception of the fourteenth auxiliary command in the computer 12 confirms a transition 277 that activates a step 278 , in which the computer 12 transmits a response to the fourteenth received auxiliary command.
- the field 53 contains the SID $10 that denotes diagnostic session control.
- the field 54 contains the session identification code, which, in this case, is the “Default Session”.
- the response to the fourteenth auxiliary command, shown on the model of the frame 30 in FIG. 2 contains the SID $50 in the field 56 and a note of the session identification code in the field 57 .
- the periodic signal also comprises an indication of the state of progress
- the computer 11 indicates the state of progress corresponding to the closure of the update session.
- the reception in the computer 11 of a response to the fourteenth auxiliary command confirms a transition 307 that transitions the computer 11 from step 306 to a step 308 , in which the computer 11 transmits a fifteenth auxiliary command to the computer 12 for activating a second local program.
- the computer 12 comprises a single activatable bank of rewritable memory and two non-activatable banks of rewritable memory.
- the single activatable bank comprises memory blocks, which contain the digital components executed and/or accessed in real time by the on-board computer 12 when the vehicle is running.
- a first non-activatable bank comprises the memory blocks mentioned above for loading the one or more updated digital components.
- a second non-activatable bank is used by the second local program, the execution of which involves copying the content of the activatable bank into the second non-activatable bank before copying the content of the first non-activatable bank into the single activatable bank when the vehicle is not running, so as to activate the single activatable bank with the updated digital components the next time the vehicle runs.
- the computer 12 comprises two twin activatable banks of rewritable memory.
- a first twin activatable bank comprises memory blocks that contain the digital components executed and/or accessed in real time by the on-board computer when the vehicle is running.
- a second twin activatable bank comprises the memory blocks mentioned above for loading the one or more updated digital components. The execution of the second local program then simply involves switching to an initiation of real time execution from the first twin activatable bank to the second twin activable bank when the vehicle is not running, so as to activate the second twin activatable bank with the updated digital components the next time the vehicle runs, for which the second twin activatable bank will act as the first twin activable bank, and vice versa.
- auxiliary commands preceding the fifteenth auxiliary command can be performed when the vehicle is running.
- the two embodiments described above have the advantage of only requiring a short duration for switching the operation of the vehicle to executing and/or accessing digital components in real time, in other words, a short duration for stopping the vehicle running in order to update digital components.
- the frame 29 shown in FIG. 2 can be used to represent the fifteenth auxiliary command.
- the target written in the field 54 in particular is a switch program reference stored in the memory in the computer 12 .
- the reception of the fifteenth auxiliary command in the computer 12 confirms a transition 279 that activates a step 280 , in which the computer 12 activates the second local program, in other words the switch program before transmitting a response to the fifteenth received auxiliary command that contains an acknowledgement of proper execution of the second local program.
- the computer 11 thus can check that the computer 12 is ready for any future access and/or execution of digital components that are read as up-to-date.
- the field 53 contains the SID $31 that denotes the activation of a program identified by the program reference of the field 54 .
- the response to the fifteenth auxiliary command, shown on the model of the frame 30 in FIG. 2 contains the SID $62 in the field 56 .
- the reception in the computer 11 of a response to the fifteenth auxiliary command confirms a transition 309 that activates a step 310 , in which the computer 11 sets the periodic signal to the ready state.
- the periodic signal can also comprise a degree of progress in phases consolidating several auxiliary commands.
- the computer 11 places the degree of progress in step 212 in order to indicate a parameter verification phase, in step 252 in order to indicate an ongoing installation phase, and in step 310 in order to indicate the end of an installation phase.
- the reception in the computer 10 of a periodic signal in the ready state confirms a transition 207 that reactivates the initial step 100 in the computer 10 , pending any other main command.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Small-Scale Networks (AREA)
- Computer And Data Communications (AREA)
- Bus Control (AREA)
- Communication Control (AREA)
Abstract
Description
-
- the third computer generates a command to write a description of said main command in a first dedicated zone of the second computer;
- the third computer transmits said write command to the second computer when the second computer is detected as ready to respond to said write command;
- the second computer transmits one or more auxiliary commands to the first computer in order to respond to the main command after receiving said write command;
- the first computer transmits a response to each received auxiliary command;
- the second computer stores each received response in a second dedicated zone;
- the third computer transmits a command to read said second dedicated zone intended for the second computer when the second computer is detected as ready to respond to said read command;
- the second computer transmits a response to the received read command;
- the third computer responds to the main command upon at least one receipt of a response to the command to read the second zone of the second computer, in which the response transmitted by the first computer is stored.
-
- to the occupied state upon receipt of the write command originating from the third computer;
- to the ready state upon receipt of the response originating from the first computer.
-
- the second computer checks whether or not the description of said main command is complete upon receipt of said write command;
- the second computer transmits one or more auxiliary commands to the first computer in order to respond to the main command only if the description of said main command is complete;
- the second computer stores a warning in the second dedicated zone if the description of said main command is not complete.
Claims (17)
Applications Claiming Priority (4)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| FR1906883 | 2019-06-25 | ||
| FRFR1906883 | 2019-06-25 | ||
| FR1906883A FR3097988B1 (en) | 2019-06-25 | 2019-06-25 | Method of dialogue with a computer on a vehicle's on-board bus. |
| PCT/EP2020/065039 WO2020259956A1 (en) | 2019-06-25 | 2020-05-29 | Method of dialogue with a computer on an on-board bus of a vehicle |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| US20220245085A1 US20220245085A1 (en) | 2022-08-04 |
| US12117954B2 true US12117954B2 (en) | 2024-10-15 |
Family
ID=67999913
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| US17/620,470 Active US12117954B2 (en) | 2019-06-25 | 2020-05-29 | Method of dialogue with a computer on an on-board bus of a vehicle |
Country Status (7)
| Country | Link |
|---|---|
| US (1) | US12117954B2 (en) |
| EP (1) | EP3991029A1 (en) |
| JP (1) | JP7602493B2 (en) |
| KR (1) | KR102807028B1 (en) |
| CN (1) | CN114026537A (en) |
| FR (1) | FR3097988B1 (en) |
| WO (1) | WO2020259956A1 (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20220242231A1 (en) * | 2021-02-01 | 2022-08-04 | CANshift LLC | Automatic transmission control system utilizing paddle shifters |
| JP7606388B2 (en) * | 2021-03-31 | 2024-12-25 | 株式会社Subaru | Reprogramming Systems and Tools |
| US12195016B2 (en) * | 2021-06-22 | 2025-01-14 | Hyundai Motor Company | Apparatus for extracting driving data of autonomous driving vehicle, and system and method for the same |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20150071115A1 (en) * | 2012-05-16 | 2015-03-12 | Bayerische Motoren Werke Aktiengesellschaft | Data Logging or Stimulation in Automotive Ethernet Networks Using the Vehicle Infrastructure |
| US20150242198A1 (en) * | 2014-02-25 | 2015-08-27 | Ford Global Technologies, Llc | Silent in-vehicle software updates |
| US20160294855A1 (en) * | 2014-04-17 | 2016-10-06 | Panasonic Intellectual Property Corporation Of America | Method for sensing fraudulent frames transmitted to in-vehicle network |
| US20170351445A1 (en) * | 2015-01-05 | 2017-12-07 | Autonetworks Technologies, Ltd. | Vehicle-mounted relay device |
| US9881165B2 (en) * | 2012-03-29 | 2018-01-30 | Arilou Information Security Technologies Ltd. | Security system and method for protecting a vehicle electronic system |
| US20180203685A1 (en) | 2015-07-23 | 2018-07-19 | Denso Corporation | Relay device, electronic control unit, and vehicle-mounted system |
| US20180217953A1 (en) * | 2017-01-27 | 2018-08-02 | Ford Global Technologies, Llc | Method and apparatus for distributed computing using controller area network protocols |
| WO2019069308A1 (en) | 2017-10-03 | 2019-04-11 | Argus Cyber Security Ltd. | System and method for validation of authenticity of communication at in-vehicle networks |
| US20200389791A1 (en) * | 2017-06-27 | 2020-12-10 | Kddi Corporation | Maintenance system and maintenance method |
| US11822649B2 (en) * | 2018-01-16 | 2023-11-21 | C2A-Sec, Ltd. | Intrusion anomaly monitoring in a vehicle environment |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TW200417852A (en) | 2002-12-19 | 2004-09-16 | Komatsu Mfg Co Ltd | Rewrite control apparatus for onboard program |
| JP5702829B2 (en) | 2013-05-23 | 2015-04-15 | 本田技研工業株式会社 | Relay device |
| JP2017118317A (en) | 2015-12-24 | 2017-06-29 | 株式会社デンソー | Communication device |
-
2019
- 2019-06-25 FR FR1906883A patent/FR3097988B1/en active Active
-
2020
- 2020-05-29 US US17/620,470 patent/US12117954B2/en active Active
- 2020-05-29 CN CN202080043378.3A patent/CN114026537A/en active Pending
- 2020-05-29 JP JP2021576268A patent/JP7602493B2/en active Active
- 2020-05-29 EP EP20733358.4A patent/EP3991029A1/en active Pending
- 2020-05-29 WO PCT/EP2020/065039 patent/WO2020259956A1/en not_active Ceased
- 2020-05-29 KR KR1020227002402A patent/KR102807028B1/en active Active
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9881165B2 (en) * | 2012-03-29 | 2018-01-30 | Arilou Information Security Technologies Ltd. | Security system and method for protecting a vehicle electronic system |
| US20150071115A1 (en) * | 2012-05-16 | 2015-03-12 | Bayerische Motoren Werke Aktiengesellschaft | Data Logging or Stimulation in Automotive Ethernet Networks Using the Vehicle Infrastructure |
| US20150242198A1 (en) * | 2014-02-25 | 2015-08-27 | Ford Global Technologies, Llc | Silent in-vehicle software updates |
| US20160294855A1 (en) * | 2014-04-17 | 2016-10-06 | Panasonic Intellectual Property Corporation Of America | Method for sensing fraudulent frames transmitted to in-vehicle network |
| US20170351445A1 (en) * | 2015-01-05 | 2017-12-07 | Autonetworks Technologies, Ltd. | Vehicle-mounted relay device |
| US20180203685A1 (en) | 2015-07-23 | 2018-07-19 | Denso Corporation | Relay device, electronic control unit, and vehicle-mounted system |
| US20180217953A1 (en) * | 2017-01-27 | 2018-08-02 | Ford Global Technologies, Llc | Method and apparatus for distributed computing using controller area network protocols |
| US20200389791A1 (en) * | 2017-06-27 | 2020-12-10 | Kddi Corporation | Maintenance system and maintenance method |
| WO2019069308A1 (en) | 2017-10-03 | 2019-04-11 | Argus Cyber Security Ltd. | System and method for validation of authenticity of communication at in-vehicle networks |
| US11822649B2 (en) * | 2018-01-16 | 2023-11-21 | C2A-Sec, Ltd. | Intrusion anomaly monitoring in a vehicle environment |
Non-Patent Citations (1)
| Title |
|---|
| International Search Report issued on Aug. 19, 2020 in PCT/EP2020/065039 filed on May 29, 2020, 2 pages. |
Also Published As
| Publication number | Publication date |
|---|---|
| EP3991029A1 (en) | 2022-05-04 |
| FR3097988B1 (en) | 2021-06-04 |
| JP7602493B2 (en) | 2024-12-18 |
| FR3097988A1 (en) | 2021-01-01 |
| CN114026537A (en) | 2022-02-08 |
| US20220245085A1 (en) | 2022-08-04 |
| KR102807028B1 (en) | 2025-05-14 |
| KR20220024905A (en) | 2022-03-03 |
| WO2020259956A1 (en) | 2020-12-30 |
| JP2022538080A (en) | 2022-08-31 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11223525B2 (en) | Gateway device, firmware update method, and recording medium | |
| US11360762B2 (en) | Information update apparatus and information update method | |
| US12117954B2 (en) | Method of dialogue with a computer on an on-board bus of a vehicle | |
| US20030121032A1 (en) | Method and system for remotely updating function of household device | |
| US20170192770A1 (en) | Gateway device, in-vehicle network system, and firmware update method | |
| CN112953775B (en) | Vehicle machine upgrading system and method | |
| CN114564179B (en) | Parameter configuration methods, devices and systems | |
| CN111381844A (en) | Method and device for updating vehicle ECU firmware | |
| US11455393B2 (en) | Device for securing diagnostic commands to a control unit, and corresponding motor vehicle | |
| CN114840241A (en) | Data processing method and related equipment | |
| WO2018176692A1 (en) | System firmware updating method, device and battery management system | |
| US20220055637A1 (en) | Electronic control unit and computer readable medium | |
| CN110688136B (en) | Application program updating method and device | |
| CN114579161A (en) | Application program updating method and ECU | |
| CN120371369A (en) | Upgrade method and device for complex programmable logic device, electronic equipment and medium | |
| CN113824620A (en) | Partition switching method, device, vehicle and storage medium | |
| RU2816885C2 (en) | Method of interacting with computing device on vehicle on-board bus | |
| CN119690475A (en) | RISC-V MCU system firmware upgrading method | |
| WO2024197570A1 (en) | Upgrading detection method and device | |
| US11171857B2 (en) | Identifying an electronic device connected to a communication network that has XCP enabled | |
| CN110290158A (en) | Method and system for updating train communication network nodes | |
| CN114756270A (en) | Automatic driving system firmware upgrading method and automatic driving system | |
| US20250130620A1 (en) | Soc fault indication strategy to the mcu for the adaptive partitions during bootup stage | |
| CN112141021A (en) | Control method, device and system for vehicles in Internet of vehicles | |
| CN120670012A (en) | Program upgrading method, electronic control unit, terminal device, storage medium, program product, and vehicle |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| FEPP | Fee payment procedure |
Free format text: ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: FINAL REJECTION MAILED |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: NON FINAL ACTION MAILED |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER |
|
| AS | Assignment |
Owner name: AMPERE S.A.S., FRANCE Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:RENAULT S.A.S.;REEL/FRAME:067526/0311 Effective date: 20240426 Owner name: AMPERE S.A.S., FRANCE Free format text: ASSIGNMENT OF ASSIGNOR'S INTEREST;ASSIGNOR:RENAULT S.A.S.;REEL/FRAME:067526/0311 Effective date: 20240426 |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: NOTICE OF ALLOWANCE MAILED -- APPLICATION RECEIVED IN OFFICE OF PUBLICATIONS |
|
| ZAAA | Notice of allowance and fees due |
Free format text: ORIGINAL CODE: NOA |
|
| ZAAB | Notice of allowance mailed |
Free format text: ORIGINAL CODE: MN/=. |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: PUBLICATIONS -- ISSUE FEE PAYMENT RECEIVED |
|
| STPP | Information on status: patent application and granting procedure in general |
Free format text: PUBLICATIONS -- ISSUE FEE PAYMENT VERIFIED |
|
| STCF | Information on status: patent grant |
Free format text: PATENTED CASE |